MN 



HA 



MN and HA share a Security Association identified 
NAI at Mobile IP level 



Compute or Obtain 
dynamic HoA 



(1) HoA Registration Request 



9- 




(2) MIPv6 Module: verify authenticity of 
user by verifying the MN-Authenticator. 
NAI is the index to the key SA by the 
HA. 






(3) Create the IPsec 
the 


SPD/SAD entry for 
MN 



(4) HoA Registration Response 






(Success/Failure) 






(5) Binding Update 


hi 



Fig. 1 




MN obtains 
dynamic HoA 




MN sends HoA 
Reg. Req to HA 
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HA sends A&K > 
mafl to MN 
(Optional) 
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HA stores HoA 
& assoc lifetime 
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HA sends A&K 
mat'l 
to MN 
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MN sends add. 
HoA Reg. Req to 
HA 



HA stores HoA, 
SPI in IPsec 
engine 



HA sends 
HoA Reg. Res 
to MN 



MN uses BU 
when needed 
until HoA lifetime 
expires 
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FIG. 2 
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